Query: ibm_kms_root_key_rotation_disabled_count

select
  count(*) as value,
  'Root Key Rotation Disabled' as label,
  case
    count(*)
    when 0 then 'ok'
    else 'alert'
  end as "type"
from
  ibm_kms_key
where
  rotation_policy = '{}'
  and not extractable
  and state <> '5';